Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0678404-a4e6-35fa-8498-b1bcdab369b8.roa
File:                     a0678404-a4e6-35fa-8498-b1bcdab369b8.roa (raw, json)
Hash identifier:          SoYjVlbaKgO+rjMNpAwE4p+mgozabhsNwFbrtBJlGdY=
Subject key identifier:   9D:FE:27:C6:5C:46:E5:6A:7B:8D:D0:54:44:B5:BF:FA:74:1B:B2:4D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA01339F4EB33F64695907608
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0678404-a4e6-35fa-8498-b1bcdab369b8.roa
Signing time:             Fri 24 Oct 2025 06:35:46 +0000
ROA not before:           Fri 24 Oct 2025 06:35:46 +0000
ROA not after:            Thu 22 Jan 2026 07:35:46 +0000
asID:                     13335
IP address blocks:        162.159.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:13:39:f4:eb:33:f6:46:95:90:76:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 24 06:35:46 2025 GMT
            Not After : Jan 22 07:35:46 2026 GMT
        Subject: CN=4a320dce-cbf9-4125-9409-4063d0261a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7d:b6:de:27:88:9d:c8:b9:89:09:f7:90:be:
                    a1:bc:ba:60:4f:0e:d9:40:33:5a:65:85:85:38:e5:
                    de:10:65:b0:8b:59:e5:fe:57:bd:0a:5d:27:a8:fa:
                    83:c9:40:92:5e:13:36:b4:dc:de:bf:80:3d:a4:68:
                    3f:ab:83:48:d5:57:3a:3b:0a:84:fd:f1:02:00:e3:
                    d7:b8:3f:92:95:98:2a:e6:59:43:94:a4:26:7f:80:
                    06:56:b8:b0:23:c0:b7:a3:35:15:93:22:5c:36:67:
                    26:dd:3b:e8:b4:dd:40:5c:e6:e3:2f:2e:19:a3:f1:
                    6c:2e:71:78:4e:a0:05:3f:40:94:ea:0a:ac:57:3b:
                    ae:f7:b6:8e:2d:32:05:84:7d:18:05:df:06:da:5f:
                    30:a6:b8:86:bd:c8:88:ad:4a:50:1c:2a:9b:07:34:
                    2c:16:62:8a:46:5b:42:40:1c:59:c0:40:8d:72:5b:
                    38:e6:b1:42:05:7e:fe:c5:d6:fb:c4:8b:a0:35:03:
                    bf:8a:3b:04:bd:a4:ff:b7:81:61:9c:aa:5c:51:32:
                    0e:86:e0:11:23:d3:35:4e:1e:7f:3f:84:c5:00:aa:
                    4c:54:85:80:83:4c:33:f3:27:3a:6b:79:f6:24:a8:
                    72:b8:b7:3d:d6:d0:ba:4f:2d:af:7d:15:28:49:d9:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FE:27:C6:5C:46:E5:6A:7B:8D:D0:54:44:B5:BF:FA:74:1B:B2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0678404-a4e6-35fa-8498-b1bcdab369b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:38:5e:e4:77:95:f0:0c:22:44:95:49:0f:3d:87:75:7f:e4:
         7a:0e:ea:83:9c:ee:ca:ea:13:0d:31:fb:bd:dd:ac:31:b2:1d:
         24:58:d7:e6:b9:fd:be:54:66:75:d2:e1:dd:6e:06:7c:65:c7:
         53:0b:b8:3b:bc:c2:3d:69:81:29:6c:b2:0f:a4:91:54:58:47:
         3f:11:7f:16:5e:a2:0f:6f:03:d8:8c:69:2c:ae:a8:cf:7e:c3:
         ae:37:ad:6b:00:a7:29:c5:ee:3a:67:05:0f:c9:bd:d3:2e:d5:
         1a:b0:37:f3:83:e7:8a:f4:e7:80:bf:de:33:9a:4f:19:66:1e:
         d4:b5:4f:66:34:81:05:fb:17:9f:fb:51:6f:d5:ca:3f:24:3f:
         f7:92:13:e2:f2:49:e9:e5:89:f2:80:c3:9d:6f:75:95:f0:f2:
         d5:2b:47:1e:69:c2:07:49:d4:c9:d2:c5:e7:db:c1:c7:1c:6a:
         5c:b3:17:fa:b8:fb:97:30:44:a9:10:18:c4:e6:87:67:fc:24:
         cc:6f:31:94:92:3e:45:d4:bf:7a:0f:cc:09:b5:92:e0:99:2d:
         15:9e:8e:44:d9:32:4d:3b:6c:d2:b1:a8:e6:ba:98:29:88:94:
         02:6a:29:39:4d:40:60:d3:d7:18:de:40:a3:2f:48:48:3f:3a:
         a5:e2:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 09:59:10 2025 by rpki-client